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Abstract Let E/Q be an elliptic curve with no nontrivial rational 
2-torsion points where Q is the rational numbers. In this paper, we 
prove that there is a quadratic twist Eo for which the rank of the 2- 
Selmer group is less than or equal to 1. By the author's earlier result 
[[ll, this implies an unconditional distribution result on the size of the 
2-part of the Tate-Shafarevich group of the quadratic twists of E. By 
[|7l, if we assume the finiteness of the Tate-Shafarevich group of an 
elliptic curve, our result yields a fairly general distribution result for 
quadratic twists with Mordell-Weil rank 1 . 

1 Introduction 

Let E/Q be an elliptic curve given by y'^ = + ax + b, Ed, a quadratic twist 
Dy^ = x^ + ax + b, and Sel*^^^ (Ed), the 2-Selmer group of Ed- In this paper, we 
prove 

Theorem 1.1 [^Lef E/Q be an elliptic curve with no nontrivial rational 2-torsion 
points. Then, 

#{\D\ <X:D square-free, dimSe|(2)(£D) < 1} >X/(logX)" 
for some < Ct < 1. 

This result will follow from [21 Theorem 1.2] once we prove the existence of D 
such that dimSe|(^)(££.) < 1. Let W{Ed)[2] and rank£z)(Q) denote the 2-part 
of the Tate-Shafarevich group and the Mordell-Weil rank, respectively. Since 
SeP\ED) = Ed{Q) /2£d(Q) ©n(££,) [2], our theorem implies the obvious distri- 
bution results for #111 (E/j) [2] and rank Eo{Q)- The distribution result for rank Ed (Q) 
is also obtained in [9] and [8J by establishing the non-vanishing of L-functions, 

' The result is improved recently by Mazur and Rubin ||6| using Kramer's work Q. 
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but the one for #]K{E£)) [2] seems new when E has no nontrivial rational 2-torsion 
points. 

Corollary 1.2 Assume the finiteness of the Tate-Shafarevich group of all elliptic 
curves over Q. Let E/Qbe an elliptic curve with no nontrivial rational 2-torsion 
points such that E has multiplicative reduction atv\ 6°°. Then, 

#{\D\<X:D square-free, rank££,(Q) = 1 and dimn(££,)[2] = 0} 

»X/(logX)« 

for some < oc < 1 which depends on E. 

If we assume the finiteness of the Tate-Shafarevich group, the parity conjecture 
for elliptic curves over Q can be proved using the 2-parity conjecture which was 
proved in (Tl, and our corollary follows from this result and the assumption. The 
proof is given at the end of Section |4j 

Our original goal was to (unconditionally) prove the existence of D with dim Sel^^^ (Eo) = 
0, but we were not able to push our method to obtain such a result. In fact, the 
finiteness of the Tate-Shafarevich group and the nondegeneracy of the Cassels- 
Tate pairing imply that our method of twisting by large primes will fail to produce 
a D such that dim Se|(2)(£) = a and dimSe|(2)(£:^) = b where a-\-b = 1 . Our 
current goal is to remove the finiteness hypothesis in the corollary. 

In lEl, for £■ : = jc^ — X and a positive integer n, Heath-Brown computes the 
proportion of D up to X as X ^ oo, for which dimSe\^'^^ (Eo) = n, and in [fTTl . 
Sir Peter Swinnerton-Dyer obtains a similar result for far more general elliptic 
curves with full 2-torsion points as the number of prime factors of D approaches 
infinity. In [|l3l . using the 2-Selmer groups of quadratic twists of E where E is 
any elliptic curve with full rational 2-torsion points, the author proves conditional 
and unconditional results on the existence of a positive proportion of D up to X 
with rank£'/)(Q) = a where a < 1, and in [12J using a result of [|T3l , they compute 
the average size of #JK{Eo) [^] where Eo is the dual 2-isogeny of E considered in 
[fT3ll . Via the modularity of elliptic curves over Q and Kolyvagin's result, Ono and 
James in [4] obtain results about the distribution of D with the trivial /?-Selmer 
group of Eo where p >3 and £ is a fairly general elliptic curve. Our method is 
rather direct and similar to [fTTTl . Using Schaefer's framework IfTOl , we naturally 
identify each Se\^'^\Eo) with a subgroup of L* / (L*)^ where L is an etale algebra 
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over Q that does not depend on D, and we do a rather exphcit computation in this 
fixed space L*/{L*)^. 

In Section |2} we briefly summarize Schaefer's description of a Selmer group, 
and sketch the proof of our result. Section [3] consists of rather technical lemmas 
which shall be used to choose a prime number with properties required in the 
proof of our theorem. The phenomena of the quadratic reciprocity law and the 
Cebotarev density theorem are the main tools for the proof of the lemmas in that 
section. In Section]?} we prove our theorem and corollary. 

Acknowledgement I am indebted to Steve Donnelly for many valuable sug- 
gestions, and I would like to thank Sir Peter Swinnerton-Dyer for sharing his 
work. I would like to also thank Mark Budden for his comments. This work 
is partially supported by the Research and Scholoarship Fund of the Armstrong 
Atlantic State University. 

2 Computing the 2-Selmer group 

Recall that E/Qis given by y'^ =x^ +ax + b, and does not have nontrivial rational 
2-torsion points. Let zi, zi, and Z3 be the ;c-coordinates of the 2-torsion points in 
Q, i.e., the roots of +ax + b. Let L = be the field extension Q(zi ) . For each 
place p, let us denote by Hp the number of places of lying over p. Let Se be 
the set of places of Q consisting of oo and 2, and places of bad reduction of E/Q. 
By [fTOl Proposition 3.4], we have the following isomorphism: 

H'{Q,E[2])s, =ker(N^/Q :L(5£,2) ^Q(5£,2)). (1) 

We refer to [fTOl for the definition of L(5£, 2). For each finite or infinite place p, 
let Lp := L® Qp. Then, we also have an isomorphism for the completion Q^: 

Hi(Qp,£[2]) =ker (N^^,/Q^ : L;/^)^ — . Q;/{Q;)^). (2) 

These isomorphisms are defined with a choice of representatives of Gal(Q/Q)- 
orbits or Gal(Qp/Qp)-orbits in E[2\. With certain choices of representatives, 
restriction maps reSp : Hi(Q,£'[2]) H^{Qp,E[2\) extend to the natural maps 
L* /{L*Y L*/{L*)^ which we also denote by reSp (see dl Proposition 2.4]). 
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Since Lp = n«p|p^«p. later in our calculation, the map: L*/{L*)^ L*/(L*)^ 
shall be interpreted as 




Se\^^\E) = {aeL{SE,2) :N^/Q(a) = 1, resp(a) G Im5p for all ;? g 5^} (4) 

where dp is the coboundary map ^(Qp) /2E{Qp) ^ L*/ (L*)^ induced by the map 
H\Qp,E[2])^L;/{L;)^m^. 



Let us identify the cohomology group H (Q, £ [2] with the kernel in ( IJ). Let 
qo = oo, and qi = 2, and write Se ■= {qo.qi,. . .,qn}- Denote by W^i = W^j the 
subgroup H^(Q,£'[2])5g of L(5'£,2). For each = 0, . . . ,n, let W^^ be the subgroup 
of Wfe-i consisting of a such that res^^(a) G ImS^j. Then, the 2-Selmer group is 
isomorphic to W„. Throughout the paper, by "applying the local condition at q^," 
we shall mean the process of obtaining Wy^ i from W^. Note that 



Note also that res^j,(W^;_i) is a subgroup of \-\ {Qq^,E[2]), and we can write 
reSg^(Wfc-i) = reSg^(Wfc) © T for some subgroup T of res^j,(Wyt-i). Since T inter- 
sects Im5^^ trivially, it follows that dimT + dimlmS^^ < dimH^(Q^^,£'[2]) and, 
hence, 

dim T = dim Wk- 1 - dim Wk < dim H ^ (Q^, , £ [2] ) - dim Im dq, . (6) 

By ifTOl Corollary 3.6], we have the following possiblities for the upper bounds in 
([6j): for all odd prime numbers p, we have dimlm 5p = np—\, and dim H ^ {Qp,E [2] ) = 
2{np — 1). When p = 2, we have dimlm§2 = ^2, dimL|/(L|)^ = 2n2 + 3, and 
dimQj / (Q2 )^ = 3. By (j2|, examining each case of n2, we find that the description 
([2]) implies dimH^(Q2,£'[2]) = 2^2- Throughout the paper, we let e : = if L has a 
complex embedding, and e := 1 if not. When p = oo,we havedimHi(M,£[2]) = 
2e and dim5oo = e. Hence, 



n 



dimWn = dimW^_i - £ (dimW^t-i -dimW^^). 

k=0 



(5) 




rip — I, p odd; 
n2, P = 2; 



P = 



00 
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Let Clsj;{L)[2] denote the 2-part of the 5'£ -class group of L. Then, by the 
generalized Dirichlet unit theorem, 

dimW_i=dimHi(Q,£[2])5^ 

= ( 1 + e) + ( £ n,, - 1) + dimCl5^ (L) [2] . (8) 

If the equality in ^ holds for all = 0, . . . ,n, then dimW,j = dimCl5g(L)[2] and 
hence, dimSe\^^\E) = dimC\sE{L)[2]. Our goal in this paper is to find a twist Ed 
such that dimCl5£.^ (L) [2] = and dimW^j — dimW^^ (for Ed) is maximized for 
each = 0, . . . ,n. 

By ifTl Proposition 3.1], dimH^{Q,E[2\)sE = dimH^{Q,E[2\)s'^ where S'j, : = 
{p e Se : np > \}U {2,oo}. Moreover, H\Qp,E[2]) = if p is an odd prime 
number with np = \ . So, let us redefine Se to be the set of places consisting of °°, 
2, and places p of bad reduction of E with np> I. 

Now we describe the image of the local coboundary map in Lp. First, we fix 
an embedding: Q Qp. Let p be a prime number, and suppose that [Qp(zi) : 
Qp] > [Qpizd : Qp] for / = 1, . . . , 3. Then, 

(QpxQpxQp, 
Lp^lQp{zi)xQp, 

Hence, if p is an odd prime number, then 

[q;/(Q;)'xq;/(q;)2, Up = 3; 

H\Qp,E[2]) = I Qp(^l)7(Qp(^l)*)^ "p = 2; (9) 
[o, np = l. 

In practice, these products are interpreted as in ([3]). If /> = 2 with np> I, then the 
description of H^(Qp,£'[2]) is the same as above. To give the description for the 
casep = 2withnp = l,letF:=Qp(zi).Lett//rbe the group of unit integers in F , 
and i7Q^, the group of unit integers in Qp. Then, H^(Qp,£'[2]) is isomorphic to ker 
of the norm from Up/{UpY to /{Uq Y- Since this norm map is surjective, 
and dim[/;/([/;)2 = 4 and dimf/* /{UX f = 2, we have dimH^{Qp,E[2]) = 2. 



3; 
2; 
1. 
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If Hi(Qp,£[2]) is identified as in then by Mi Theorem 2.3], for each 
prime number p, the local coboundary map E{Qp)/2E{Qp) — »• Hi(Qp,£'[2]) is 
given as follows: 

{x,y) ^ (x-Zi : z = 1) 
provided that Zi for i= 1 , . . . , — 1. 

Lemma 2.1 If rip = 3, then under the local coboundary map at p, 

(21,0) ^ {{Z\ -Z2){Z\ -Z3),2l -Z2)\ 
(Z2,0) ^ {Z2-Zi,{z2-Z\){z2-Z2,))- 

Ifnp = 2 andz3 E Qp, then (z3,0) t-^ (23-^1)- 

Proof: The proof is left to the reader. □ 

Let us conclude this section by sketching the proof of our main result. Recall 
that £'[2](Q) is trivial. Then, the cohomology groups Hi(Q,£'/)[2]) for all D are 
naturally identified in L*/(L*)^ where the etale algebra L/Q is a field extension 
of degree 3, and similarly the local cohomology groups H^{Qq,Eo[2]) for all D 
are identified in L*/(L*)^ where Lq = L(g)Q^; see (UO) below. Moreover, we 



have the natural maps L*/(L*)^ L*/{L*Y which restrict to the maps res^ : 
Hi(Q,£z)[2]) ^ Hi(Q^,£z)[2]) for all Z): 

\^\Q,Ed[2]) ^L*/{L*f (10) 



H'{Qq,En[2]) -L*/(L*)2. 

For each D, let So denote the set of places consisting of 00, 2, and places of bad 
reduction of Ed, and let S = Si. We find D satisfying that S C So which implies 

H'{Q,E[2])sCH\Q,Eo[2])s, (11) 

as subgroups of L* / (L*)^, and that for each qES, the local coboundary images for 
E and Ed identified in the space L* / {L*Y are equal to each other (see [1 , Propo- 



sition 2.5]). By (11) and the description what survives in H (Q,£'£)[2])5q 
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after applying local conditions over 5 is a subgroup of L*/(L*)^ containing 



Sel'^^-'(£') because of the second condition we impose above on D (see (26) in 
Section]?]). At each stage of applying local conditions as illustrated in ( ]26] ), the 
size of the subgroups surviving is decreased by at most the numbers given in Q 
in Section ]2] We find such D as a product of two primes p and r, where p splits 
completely and r remains prime in L, that 

dimHi(Q,£[2])5 + 2 = dimHi(Q,£z)[2])5z„ (12) 

(see ([8]) in Section ]2]). The role of the prime r shall be explained in the follow- 
ing paragraph. Putting more conditions on D, we shall have, at some intermedi- 
ate step of applying local conditions over S, the size of a subgroup surviving in 
H^(Q,£'£)[2])5^ decreased by at least one more dimension than in H^(Q,£'[2])5; 
this is served by an element a contained in H^(Q,£'£)[2])5^ \H^(Q,£'[2])5. Then, 



it follows from ( ]T2j ) that 

dimW^^<dimSe|(2)(£) + l. (13) 

To compute dimSel*^^^ (£■/)), we only need to apply the local condition at p to 
since H ^ {Q^E [2] ) = 0. With more conditions imposed on D, we can map, via resp 
the subgroup Sel*^^''(£') of outside the local coboundary image, and it follows 
that dimW^ - 2 < (dimSe|(^)(£) + 1) - 2, provided that dimSe\'^^\E) > 2 (see 
Figure 1 in Section|4|. That is, dimSel^^-* (£■/)) < dimSel'-^-'(£'). By induction, we 
prove that there is some D such that dimSe\^^\Eo) < 1- 

It gets very technical to show that there is a D satisfying all the properties 
we want, but the main tool is the generalized Dirichlet's theorem. Recall that 
H\Q,Ed[2]) H\Qq,ED[2]) extends to the map: L*/{L*)^ L*/{L*)\ the 
essence of which is the Legendre symbol over places of L lying over q. Let 
us remark here that the "quadratic residue properties" of the element a, which 



serves ( 13 1, over the places q E S more or less determines the image of Sel*^^^ (E) 

-this lemma is 



3.7 



in H^(Qp,£'[2]), via a quadratic reciprocity law; see Lemma 
proved easily by Hecke's version of quadratic reciprocity for a number field []3l 
Theorem 167]. In the previous paragraph, we claimed that Sel*^^^(£') lands out- 
side the local coboundary image of Eo at p, and it turns out that via quadratic 
reciprocity this property pleasantly follows from the condition imposed on D and 



hence on a, which serves ( 13 1. Recall that D = pr. In this very technical context. 
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the inert prime r serves to keep all local coboundary images of E and Ed over 
q E S being equal to each other, and this prime does not contribute to the size of 
H\Q,Ed[2])so; see Q. When E[2]{Q) ^ 0, we do not have this prime, and it 
posed the main difficulty to extending our proof to the general case. 

3 Lemmas 

In this section, we introduce several lemmas which shall be used in the proof of 
Theorem |1.1[ and a slight generalization of the Legendre symbol. Let L be a 
field extension of Q with degree 3, and let M be the Galois closure of L over Q. 
Let K/Q denote the quadratic extension in M if L/Q is not Galois. For an odd 
prime ideal p of and an element a of relatively prime to p, we denote 
the Legendre symbol by (a / p), and for an odd element j8 relatively prime to a, 
denote the Jacobi symbol by (a / /3). If v is a real embedding of M, then (oc / v) 
is defined to be 1 if v(a) > 0, and —1 if not. 

We define an extension of the Legendre symbol over even primes as follows: 
Let p be a prime ideal dividing 2^m- For a E Gm coprime to p, we define the sym- 
bol [a I p) to be the class of a in IJ-^jiVy^^ where f/p is the group of unit integers 
in the completion of M at p. Suppose that p and p' are prime ideals dividing 20m 
and jUp' = p for some \l E Gal(M/Q). Then there is a canonical isomorphism 
f/p/ / (t/p/)^ Up/{U^y- such that the following diagram is commutative: 

(^M/(p'r)*^(^M/(p)")* 

Y y 
t/p'/(t/p')' -f/p/W 

where the vertical maps are surjective for sufficiently large n, and given by the 
Legendre symbols. Let us denote by [a / p')^ the image of (a / p') in Up/{U^Y. 
This definition is consistent with the usual Legendre symbol over an odd prime 
ideal p since U*/{U*f ^ Z/2Z, and (a / p) (a / p')^ 

can be simply denoted by 

(a/p)(a/pO. 

Suppose that L/Q is not Galois. If *P is an even prime of L, and C 
is an unramified prime over ^ with residue degree /(H/^) = 1, then we have 
a canonical isomorphism t/«p/(t/<p)^ Uq^/ (Uq)^. Under this isomorphism, we 
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may write (a / Q) = (a / ^) for a E L*, and this abuse of notation is used in 
Lemma [34l 

Lemma 3.1 Let T be the set of 2 and prime divisors of the square-free part of 
^K/Q = (zi - zifizi - Z3Y{z7> - Zif. Let R = {ri : i = \ , . . . ,m] and {ti : i = 
l,...,m} be a sequence of prime numbers and a sequence o/±l, respectively, 
such that R does not intersect T. Then, there is an odd prime number p such that 
np = I and {p / r,) = tifor i = 1 , . . . , m, and such that {p / q) = I for all qET. 

Proof: Suppose that L/Q is not Galois. Let K be the quadratic extension 
in the Galois closure of L, and let K' := K(y^,\/^ : q E T). Let F /K' be 
the field extension K'{y/Fi : z = l,...,m). Then, since R intersects T trivially, 
Gal(F/i^') = ©™ iZ/2Z. Write T = {2,<?i, . . . ,^,}. Note that K is Q(v^) 
where d is 2ni^, or Hi^,, and that LK' /K' and F /K' are linearly disjoint and 
Galois. Hence, Gdi\{LF/K') = Gsi\{LK' /K') ®Gai{F /K'). Let Fi := K\^i). 
Then, there is an automorphism T in Gal(LF/^') such that xq%ii-i{x) is a genera- 
tor of GdX{LK' /K') and such that res/7.(T) = {ti) for each / = 1, . . . ,m. By the the 
Cebotarev density theorem, there is a prime number p ^2 whose Frobenius auto- 
morphism in Gal(LF/Q) is T. Since ^'/Q is Galois, p splits completely in K' . By 
our choice of T, it follows that np = l, and (r,- / p)= ti for all i. Since (—1 / p) = 1 
(i.e., p = I mod 4), we have ti = [p / ri). Moreover, \ = [q / p) = [p / q) 
for all odd primes q E T. If q = 2, then by the supplementary reciprocity law, 
p = I mod 8 if and only if (2 / p) = I (provided that p = I mod 4). Since 2 is 
contained in T, and p splits completely in K', we have (2 / p) = 1 and, hence, 
(p / 2) = 1. The proof of the case that L/Q is Galois is similar, and rather sim- 
pler. □ 

Remark 3.2 Let T be a finite set of infinite or finite places of M. It is well-known 
that for any modulus ra and a prime power decomposition m = Hoer 

Mm/M^,l = Mm^/Mm^^i (14) 

where A/„ = {a G M* coprime to n}, and M„ i denotes the ray mod n (i.e., {a E 
Mn : a =* 1 mod n}). If H is the Hilbert class field of M, by the class field theory, 
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Ga\{R/H) = (Mm/Mn,,i)/^^, as shown below, where is identified with its 
image in Mm/Mmj: 

1 ^ Ga\{R/H) ^ Ga\{R/M) ^ Ga\{H/M) ^ 1 (15) 



1 J Im/Pm,l I/P 1 

where J = (Mm/Mm, i)/ 1^^, Im is the group of fractional ideals of coprime to 
m, Pm,i is the group of principal fractional ideals j5^M such that /3 =* 1 mod m, 
and I/P is the ideal class group of i^m- 

Lemma 3.3 Let M, H, and m be as above. Then, there is a prime element p of 
lying over a prime number p which splits completely in M such that p belongs 
to any class in Mm/Mm,i- 

Proof: Let R be the ray class field of M mod m, and R' be the Galois closure 
of R over Q, so Gal(i?7^) C Gal(i?7Q)- Let a be a number in belonging 
to an arbitrary class in Mm/M^.i, and let o be an automorphism in Gal{R/H) 



corresponding to the class [a] G Mm/Mmj via the map in ( 15 1. Let o' be the auto- 
morphism in Gal(7?'/Q) which restricts to o. By the Cebotarev density theorem, 
there are a prime ideal of and a prime number p such that Frob(*P'/ p) = 
a' e Ga\{R'/H). Let ^3 := n Gr be the prime ideal of Gr, and p := <p n ^m, 
the prime ideal of Then, id = Frob(^7 p) \m= Frob(p/p), and hence, the 
residue degree f{p/p) = 1. Thus, p splits completely in M. 

Note that o' = Frob(<p7p) = Frob(<p7;?)^(P/p) = Frob(<p7p), and hence. 



o = Frob(*p/p). By (15), the prime ideal p is a principal ideal p'^M such that 
[p'] = [a] in (Mm/Mm^i)/^^. So, p' =* aX mod m for some X e Let 
p := p'X^^. Then, p =* a mod m. □ 

Let To := {pi , . . . , p/} be the set of all places of M over 2. Let T := {Hi , . . . , O,,} 
be a finite set of (finite or infinite) places of M outside 2, and let {e^ : O G T} be 
a sequence of ±1 indexed over T. Let m be a modulus supported hy T UTq with 



large exponents over places in Tq. By Lemma 3.3 we can choose a prime element 
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p of 6'm lying over a prime number p which splits completely in M such that 

(p / n) = £q for all G r; (16) 
(p / p) = 1 for all p e To. 

Lemma 3.4 Suppose that L/Q is not Galois. Let o be an automorphism in 
Gal(M/Q) with order 3. Let T be the generator o/Gal(M/L). Let p\ be a prime 
element of Gm over an odd prime p which splits completely in M, and p2 := opi 
and p2 :— o^pi. Let a, := ^M/tiPi) = Pi ' "^Pi- ^ prime ideal of &m 

over an even or odd prime q not equal to p. Suppose that q splits completely in 
M, and let 02 '■= <70i and 03 := <7^0i. Let ^i&u '■= 0.i- zQifor some prime 
ideal %of^L- 

Then, N£,/Q(aia2) and'Ni^Q{a20C2) are contained in (Q*)'^, and 

(ai / ^i) = (pi / 0i) (pi / T0i),, (a2 / ^l) = (Pi / n3)^(Pl / T02),^, 

(ai / ^2) = (Pi / ^2) (Pi / T02),, (a2 / ^2) = (Pi / ni)^(pi / T03),^, 

(ai / ^3) = (Pi / 03) (Pi / T03),, (052 / ^3) = (Pi / 02)c(pl / Tni),^, 



(a3 / ^1) = (a2 / ^3)a («1 / *Pl) («2 / ^2)a2 , 

(a3 / ^2) = («2 / ^i)a (ai / ^2) («2 / ^33)^2 , 
{a, I ^3) = (ai / ^i)a («2 / q33) (ai / ^2)^2 • 

Suppose that q has nq = 2, i.e., q^i = ^^^2 or qffi = ^1^2 with fi^\/q) = 2. 
Hence, ^\^m = Hi • T0i and ^2^M = 0.1 or ^2^M = 0.2- Then, 

(ai / q3i) = (pi / 0i) (pi / T0i), (oci / ^1) = (pi / 0i) (pi / T0i), 
(a2 / ^1) = (pi / 03)^ (Pi / 0i) , '''' (a2 / ^1) = (Pi / 03)a (Pi / O2) , 

if G 0.1 — T01 or (701 = 02, respectively. 

Proof: Note that 

3 3 3 

niiQ{aia2) ^\[o\aia2) ^\[o\pi-xpi) \[o\opi-xopi) 

i=\ i=l i=l 

= ( n i"(pi)) =p'- 
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Simiarly, N^/q( 052053) is a square in Q*. 

Since (ofi / = (tti / Oi), it follows that 

(ai / qJi) = (pi / Oi) (Tpi / Oi) = (pi / Hi) (pi / tHi),. 

As the proof of the other results is very similar, we leave the details to the reader. 

□ 

The relationship between the Legendre symbols for the case of L/Q being 
Galois is simpler, and we state it below without proof. 

Lemma 3.5 Suppose that L/Q is Galois, i.e., M = L. Let o be a nontrivial auto- 
morphism of (order 3) in Gal (L/Q). Let a\ be a prime element of over an odd 
prime p which splits completely in L, and (X2'.— <3(X\ and a^ .= (5^a\. Let ^1 be 
a prime ideal of over an even or odd prime q not equal to p. Suppose that q 
splits completely in L, and let '■= O'^i and := cr^^i. Then, N^/Q(aia2) 
and'Ni^/Q{a20C^) are contained in (Q*)^, and 

(ai/q3i) = (a2/^2)cT2 = (a3/^3)a; 
(ai/q32) = (a2/^3)a2 = (a3/q3i)cT; 
(ai/q33) = («2/^i),,2 = (a3/^2)a. 

Remark 3.6 If L/Q is not Galois, the symbols (pi / £3, ) and (pi / tH/) in Lemma 



3.4 can be treated as free variables as explained in (16). Then, the matrix over 
Z/2Z associated with the system of the first six equations in Lemma 3.4 has rank 
5, and Y[j=i Y[]=i (ofi / ^j) = 1 is the (only) constraint. Thus, the five variables 
(a,- / for / < 2 or J < 3 can be treated as free variables. 



If L/Q is Galois, by Lemma 3.5. (ai / ^j) for j =1,2,3 can be treated as 
free variables. 

A similar result is available for real places of L if there are three real embed- 
dingsofL. Suppose that L has three real embeddings, and that Gal(A//Q) = (c7,t) 
where a has order 3, and T has order 2. Then, M must have six real embed- 
dings, and we let v be a real embedding of M. All six embeddings are in the 
form of v/i for some jl e Gal(M/Q). It is clear that {x / vjl) = (jU(x) / v) for all 
II e Gal(M/Q), and if m is a real embedding of M and u' is the restriction of u to 
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L, then {x / u) = {x / u') for all xEL.li follows that 

(aia2 / v) = (pi / v) (pi / vt) (pi / vo) (pi / vxo) . 

Likewise, (oc/OCj / u) where w is a real embedding of M are written in terms of the 
Legendre symbols of pi over real embeddings, and we can obtain, by imposing 
values on (pi / m)'s, the desired values of (a/Ctj / u) which are required for the 
proof of our theorem. The case: M = L (with 3 real embeddings) is simpler. 
When there is only one real embedding of L, the restriction map H^(Q,£'[2]) — »• 
H1(M,£[2]) is trivial as H1(M,£[2]) is trivial by (g). 

Lemma 3.7 (Reciprocity Law) Let M/Q be a Galois extension. Let x and y be 
elements of Gm such that xGm = Oi ■ ■ -H^a^ and yOu = ■ • -H^b^ where £li 
and are primes, and such that xy^M is not a square. Let nXx be the product 
of 0.i which are odd, for i = 1 , . . . , and xriy, the product of 0^, which are odd, 
for /=!,...,?. If p is a totally positive prime element p G ^m, coprime to xy, 
lying above an odd prime number p splitting completely in M such that p =* 
1 mod So°i^M, then 

{x/ p)=Y[{p 
{y/p)=Y[{p/Q)- 

Proof: Let m be the 1cm of and rUy, and a be any integer in M coprime to m 
such that 

a =* 1 mod 8oo^^. 

Then, sgn(cr a) = \ for all real embeddings a : M ^ M, and by (SI Theorem 167], 
we have 

{x / a) = {a / m.O , {y / a) = {a / my) . 

□ 

Note that L® Q2 is a product of local fields. Let H^(Q2,£[2])o denote the 
subgroup generated by tuples in L ® Q2 whose entries are unit integers of the 
local fields. 
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Proposition 3.8 There are totally positive elements /3i , . . . , j8f in L* lying over 
primes p with np = 3, representing elements in H^(Q,£'[2]) such that (/3i, . . . ,j8f) 
surjects down to H^(Q2,£'[2])o under the restriction map. 



Proof: Suppose that n2> I, and that L/Q is not Galois. Using Lemma 3.4 
have 

1. if2^M = ^1^2*^3, then 

(aia2 / ^i) = (pi / Hi) (pi / tHi), (pi / 03)^ (Pi / -^^2),^ . 

(«ia2 / ^2) = (Pl / 02) (pl / Tn2),(Pl / ni)^(pi / Ti33),cT' 



we 



2. if 2^M = *P?*P2 or <Pi<P2, then 
(aia2 /^i) = 



(pi/Tni),(pi/i33)a. 

(Pl / Oi) (Pl / tHi), (Pl / 03)a (pl / n2) . 



Note that (^m/^")* f^<p/(f^<p)^ is surjective for n sufficiently large. Con- 
sider the modulus m = 2''^°°&m, and the isomorphism 

MJM^^I = 0M<p,,./M^,. 1 © 0M„/M,,i. 



Suppose that 2 splits completely in L. As mentioned earlier in Remark 3.6 all 
(pi / 0.i) and (pl / x0.i) can be treated as free variables. Moreover, pi can be 
chosen to be a totally positive prime element lying over a prime number with 
np = 3. So, recall the case [T] above, and let 

(Pi/ni) = (Pi/Tn2) = i. 

Then, 

(aia2/^i) = (pi/Tni),(pi/n3)cT 
(aia2 / ^2) = (pl / 02) (pl / Tn3),cT, 

and it is clear that we can impose any pair of values on (oci a2 / ^1 ) and (oci a2 / ^2) • 
Recall that aia2 represents an element in H^(Q,£'[2]), and also recall the descrip- 
tion p\ and (M). Then, it can hit an arbitrary element in (Q2,£'[2])o by choosing 
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values of the Legendre symbols on pi. Thus, we can find the /3/'s claimed in the 
theorem. The proof of Case[2]is similar. 

Suppose that L/Q is Galois, and that 2(^m splits completely. In this case, we 
have only three free variables as shown in Lemma [33| and we have 



(aia2/^i) = (ai/^i)(ai/*P3)^ 
(aia2/^2) = («i/^2)(«i/*Pi)^. 

So, let («! / ^i) = 1. Then, it is clear that any pair of values can be imposed 
on (aia2 / ^i) and (aia2 / ^2), which proves the result for the case of Galois 
extensions. 

Suppose that ^2 = 1 . Note that there are only two extensions of Q2 of degree 
3, namely, ifi : = Q2 [x] / {x^ - 2) and ^2 : = Q2 M / (-^^ - ^ + 1 ) • The local field ^1 
corresponds to the case where 2 is totally ramified in L, and the case where 
2 is inert in L. Consider the case = Regardless of whether or not L/Q is 
Galois, the completion Lqj is Galois over Q2, and it is Let = O. ■ T0 

be the factorization of ^ in M if L/Q is not Galois. Then, an automorphism 
<7 e Gal(M/Q) of order 3 acts trivially on {O, tQ}, and this automorphism can be 
considered as one in 

Gal(if2/Q2)- Note that o G Gal(^2/Q2) acts on t/«p/t/| = 
Uq/Uq while it was not the case for np> I. Since n2 = 1, the kernel of the map 

N^2/Q2 : ^27(^2*)' Q2V(Q|)^ is the kernel of 

which we denote by V, and dimV = 2. We claim that o acts nontrivially on V and 
hence, nontrivially on the corresponding subgroup of Uq/Uq, which we denote 
by V'. Suppose that o acts trivially on V so that for each a G i/qj representing 
an element of V, there is some x G t/qj such that oa = ax^. Then since [a] G V, 
there isy E U2 such that = a - oa ■ o^a = a ■ ax^ ■ ax^o{x)^, and hence, a ~ 
{y{ax^a{x))-^) G This proves the claim. Note that , 



(aia2 / 



(pi /i2)(pi /tO)^(Pi /n)^(pi /t£}),^ if L/Q is not Galois 
(ai / *p) (ai / if L/Q is Galois. 



Recall that we can treat (pi / 13), (pi / tO), and (oci / ^) as free variables on 
Uq/Uq or on U'^/U^. If we write these vector spaces over F2 additively, the 
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tranformation ( 1 + a) is invertible on V' since a(l + a) = a + a^ = — 1 = 1. This 
means that each of (pi / 0) (pi / 0)^ and (pi / tH) (pi / tH)^ can assume any 
value in V', and so does (oci / ^) {ai / in V. Thus, using the Cebotarev 
density theorem as in < [T6] ), we obtain the result. 

Consider the case 2ffi — Vp^. As in the previous case, for H^(Q2,£'[2]), we 
only need to consider the kernel, denoted also by V, of 

and dimV = 2. Note that <P^m = H, and that the natural map C/qj/C/sp Uq/Uq 
is not injective. It has kernel of dimension 1, and it is the subgroup of U'^/U^ 
generated by the class represented by —3 as f/£3 has a primitive third root of unity. 
Since f/<p/f/^ = V © ([—3], [3]), it implies that V injects into Uq/Uq, we denote 
the image of V by V'. Let ^ be the completion of M at 0. Let Gal(^ /Q2) 
be generated by o of order 3 and T which generates Gal(^/^i). Note that 
Gal(^/Q2) acts on Uq/U^. As in the previous case, involved in computing 
(aia2 / ^) is the transformation 1 + t + a + tct on Uq/Uq. Note that 1 + T + 
o + TO restricted to is l + l + o + o^ = o + o^ since T acts trivially on V'. 
As in the previous case, it turns out that o acts nontrivially on each of the three 
nontrival elements of V' and, hence, a + cr^ = — 1 = 1 on V'. Therefore, if we 
choose a totally positive prime element pi of such that (pi / H) is any value 
z'mV'c Uq/U^, then 

(aia2 / n) = (pi / 0) (pi / 0), (pi / 0)^ (pi / 0),^ = z. 

Since V is naturally isomorphic to V' and [ctiOC2] ^ V, it means that (aia2 / ^) 
can be any value in y C f/<p/f/^. □ 

Corollary 3.9 There is a set S consisting of°°, 2, and primes p with np = 3 such 
that H^(Q,£'[2])5 surjects down to H^(Q2,£'[2]) under the restriction map. 

Proof: Let *p be a prime ideal of i^l- If L/Q is not Galois, then M/L is ramified 
and, hence, the Hilbert class field H of L and M/L are linearly disjoint. It follows 
that Ga\{HM/M) = Ga\{H/L) which is true for the case M = L, as well. Then, by 
choosing a Frobenius automorphism in Ga\(HM/M), we can find a prime ideal pi 
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of representing the class of ^ in Cl( i^^) such that the prime number ;? : = p i fl Z 
splits completely in L. From = P1P2P3, it follows that ^p2p3 is a principal 
ideal. 

Suppose that 2^/^ = *Pi^2^3- Then, there are prime numbers p and p' split- 
ting completely in L, i.e., p<f?'i = P1P2P3 and p'ff^ = P1P2P3, such that ^ip2p3 
and ^2p2p3 are generated by a and j8, respectively. Note that N/^/Q(aj8) = 
±{2pp')^. So, either of x := ±a/3 represents an element of H^(Q,£'[2]) since 
[L : Q] =3. Then, it is clear that we can find an element y representing an element 
in H ^ (Q, £■ [2] ) such that y^L = ^2^3 a where is square-free and supported only 
by prime ideals lying over primes splitting completely. The two elements res2(x) 
and res2(y) together with H^(Q2,£'[2])o generate H^(Q2,£'[2]), and by the previ- 
ous proposition, we prove the result. The proof for the other cases of splitting of 
2^L is similar. □ 



4 Proof 

We prove Theorem |1.1| in this section. Let E and L be as in Section |2j From 
now on, when q is an odd prime number, we say that Imdq is unramified if 
Im5^ is contained in H^(Q^,£'[2])unr = Lq{(d^2), and totally ramified if Im5g con- 
tains no nontrivial elements of Lg(0,2). For example, if rip = 3, then a subgroup 
{{pa,b), (c.pd)) in H^(Qp,£'[2]) is totally ramified where a,b,c,d are unit inte- 
gers, while {{pa,b), (pc.d)) is not totally ramified. Let S be the set of 2, 0°, and 
places q of bad reduction of E/Q such that q is ramified in L with Uq = 2. This 
set S depends only on L. In this section, our elliptic curve is replaced by its twists 
several times, but the set S is not replaced, and fixed to be the one just described 
here, once and for all. Let Te be the set of places consisting of 00, 2, and places p 
of bad reduction of E with Hp > 1, except for the odd primes q&S such that Im5^ 
is unramified. 

First, we shall argue below that there is a quadratic twist E' satisfying the 
following properties: 

Property 4.1 
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1 . E' has good reduction at odd places p with Hp = 2 which are unramified in 
L, and Im dp is totally ramified at odd places p of bad reduction with rip = 3; 

2. C1(L) [2] is generated by prime ideals over primes p with rip — 3 at which E' 
has bad reduction; 

3. Se|(2)(£') intersects H\Q,E'[2])s trivially; 

4. As we apply the local conditions to H^{Q,E'[2])t^, over oo, 2, and all odd 
primes q E S, the dimension drops by £ at oo, and by 1 at odd primes q E S 
if Im 5^ is ramified. 

5. H\Q,E'[2])t^, surjectsontoHi(Q2,£'[2]). 

Let us first show that if p is an odd prime number unramified in L such that 
rip — 2 then either E or the quadratic twist Ep has good reduction at p. Note that 
a twist E[) can be given by =x^ -\- aD^x + bD^ . Twisting by p, if necessary, we 
may assume that + ax + Z7 = {{x-z-i)){{x-z?,) - {zi-Z2,)){{x~Z2,) - {zi-Zi)) 
where z^ E Qp such that ord«p(zi —23)= ord(p(z2 — 23) is even where pffL = 
and f{^/p) = 2. Then, changing the variables over Q^, we find a Zp-model 
y-^ = x{x — a){x — ji) where {x — a){x — ji) is an irreducible polynomial over Qp, 
and a and /3 are unit integers. Since np = 2, the quadratic polynomial remains 
irreducible over and, hence, it has good reduction at p. If Hp = 3, then either 
E or the twist Ed with D = p has a totally ramified local coboundary image at 
p. This can be easily shown by considering the cases of the triples of parities of 



ordp(zi -Z2), ordp(z2 -23), and ordp(z3 -zi) and using Lemma 2.1 So, let us 



assume without loss of generality Property [4. 1[ #1. 

Note that we may as well assume that C1(L)[2] is generated by prime ideals 
*P's dividing primes p with rip = 3 at which E has bad reduction. We always have 



such primes p as argued in the proof of Corollary 3.9, and after twisting E with 



the product of these primes p, it has Property [4. 1[ #2. 

Let X be an element of representing a nontrivial element in H^(Q,£'[2]). 
Then, L{y/x) is linearly disjoint with M over L since M = L{VA) with A G Q. Us- 
ing the Cebotarev density theorem and the nontrivial automorphism in Gal{LM{^/x) /M) , 
we can find a prime p splitting completely in L, i.e., pff^ = ^i^2^3, such 
that {x / ^i) = —I. Recall that given an elliptic curve E/Q, we denote by Se 
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with Hp > I. Since 



the set of 2, 0°, and places p of bad reduction of E 
Hi(Q,£[2])5 is finite, we can find k distinct prime numbers p ^ Se with rip = 3, 
where k = #H\Q,E[2])s~l, such that each nontrivial element zeH\Q,E[2])s 
represented by an element x of L* is a non- square unit integer in some Lp. Let 



D be the product of these k primes. Then, by Lemma 2.1 , the local coboundary 
images of Eo at these primes p is totally ramified, and each nontrivial element z 
of H^(Q,£'[2])5 is mapped to a nontrivial element of H^(Qp,£'£)[2])unr at some of 
these primes p as illustrated below: 



res 
z — > 



H'(Q,£[2]), 



H'(Q,,£^[2])„ 



ImS/ 



R\q^,E^[2]) 



Figure 1 



where Im5^ denotes the image of the local coboundary map at p for Eq. Hence, 
Sel'^^-' (£■/)) intersects H^(Q,£'[2])5 trivially; see Property 4.1 #3. In particular. 



Sel*^^-* (£■/)) does not contain an element represented by .x; G L* such that xi^t is a 
square. Thus, we can assume that if x E represents an element in Sel*'^^(£'), 
then the square-free part of xi^i is necessarily supported by a prime ideal outside 
S. 

Let us recall Lemma [3^ Lemma [33| ( fT6l ), and Remark |3]6} Given an odd 
ramified prime q with Hq = 2 and q^i — ^^^2: we can find a prime number p 
such that (aia2 / ^^i) = — and (aia2 / ^) = 1 for all other places *p lying 
over 2, 00 or a prime number r of bad reduction of E with rir > I where ai and 



a2 are as defined in Lemma 3.4 and 3.5 For each of these primes q, let pg denote 
the prime number p, and we renew our elliptic curve E with the twist Eo where 
D is the product of the Pq's. Then, as we apply the local conditions at odd primes 
^ G 5 to H^{Q,E[2])s^, some elements aia2 of H^(Q,£'d[2]) are mapped to the 
nontrivial element of H^(Qg,£'[2])unr under res^ as in Figure 1 and, hence, at 
odd primes q E S, the dimension drops by 1 if lm5q is (totally) ramified; see ^ 



and Property 4.1 , #4. This twisting step possibly changes the local coboundary 
images everywhere, but satisfied are the properties which are discussed in the 



previous paragraphs, and stated in Property 4.1 as the first three items. Note that 
Property |4. 1, #3 remains true since after twisting, Im5^ may be different from 
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Imdp, but remains totally ramified. If Im5^ is unramified when ^ G 5 is odd, then 
Im5^ = ((a)) where a is a unit integer of Qq, and no elements in Hi(Q,£'[2]) 
which are ramified at q will be mapped to Imdq under res^. This means that, to 
compute Sel'-^-'(£'), we may apply the local conditions to \-\^{Q,E[2\)te. Since 
C1(L)[2] is generated by prime ideals over primes p with np = 3, at which E has 
bad reduction, by ([8]), we have 

dim H 1 (Q, £ [2] ) = dim H 1 {Q,E)s, - #{Se \Te). 

More importantly, since the in this paragraph are still contained in (Q,^)^^, 



the fourth item in Property 4.1 is satisfied for odd primes q & SCiTe- By Remark 



3.6, when L has three real embedding s, we have a version of Lemma 3.4 and 3.5 
for q = °°, and can find a prime number poo such that (aia2) H^{M.,E[2\) is 
surjective. By Corollary 3.9 we may assume P rope rty [4. 1[ #5. 



We shall show that if {E satisfies Property 4.1 and) dimSel*^^^(£') > 2, then 



dimSel^^) (Ep) < dimSel^^) (E) for some D. Suppose that dimSel^^^ (E) > 2. Then, 



by Property 



4.1 



, #3, the subgroup Sel''^''(£') contains two elements represented by 
X and y in L* such that the square-free part of each x^i and y^E is supported by 
ideals lying over splitting primes qi and q2 outside S, which are not necessarily 
distinct. To compute Sel'^^-*(£'), we shall apply to Hi(Q,£'[2])7^ the local condi- 
tions at ^ G 5 first, and then at the remaining places, in an order such that the local 



conditions at qi and q2 are applied at the very end as shown in ( 17 1. Recall from 
Sec [2] the definition of Wj^'s: 



incl 



-1^0- 

■es„| 

Im5„ 



incl 



res,; I 



incl 



-W„ = Se|(2)(£). (17) 



Im5^ 



Im5^2 



Of course, the value of dimSel*^^^(£') does not depend on the order we apply local 
conditions, but we use this order to make our later argument work. Note that by 
Property 4.1 #4 and #5, there must be a place q* G Se with nq* = 3 at which 
the dimension does not drop by 2 as we apply the local conditions in an order 
described above; otherwise, dimSel*^^^(£') would be zero. 

Lemma 4.2 Suppose that dimSel*^^''(£') > 2. Then, there are x andy in Sel*^^''(£') 
and qi and q2 outside S with qi^L = ^l^2^3 and q2^E = ^l^2^3 such that 
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q2, or q* is not equal to qi or qi, and that 



(18) 



where and ay are square-free ideals, di and are or 1, Y.di = Y. = i^iod 2, 
did2 7^ 1, and e\e2 7^ 1, or 

where an^^ % are square-free ideals supported by S. 

Proof: Let us prove the assertion that q* = qi, or q* is not equal to qi or (72- 
Suppose that q* = q\ and q\ 7^ ^2- This means that the dimension drops by 2 at 
all places prior to qi and ^2; otherwise, we could choose q* not equal to q\ or 
^2- Note that if dimW„_i — dimVF,, < 2, then we can choose q* = qi, and we are 
done. So, assume that dim — dim W„ = 2, which means res^2(^n-i) = V © T 
where V is the maximal subgroup contained in ImS^j and dimT = 2. Note that 
since W„-\ C Wn-2, we have XQ^q^{W„-\) C res^2(^n-2)- This means that if we 
apply the local condition at q2 earlier than at qi, then V ®T (Z res^2(^/i-2) and, 
hence, the dimension of W„-2 drops by 2 after applying the local condition at q2. 
Thus, q* = qi must be the case. So, we may assume that the local conditions at qi 
are applied first, and q* = q2- 



Suppose that we can choose qi 7^ q2, so we have the factorization in (18 1. 
If for all such qi and q2, we have d\d2 = I and e\e2 = 1, then we must have 
xy G H^(Q,£'[2])5 which contradicts Property 4.1 , #3. So, we have d\d2 7^ 1 or 



61^2 7^ 1 for some choice of distinct qi and q2. Suppose that d\d2 = 1 and 61^2 7^ 1- 
Then, 

xyffL = %'^'%'^'%'a,ayhlh]- 
yffL = %%{V\'%'%')^y^r 
If x' = xy and / = y, then for all possibilities of ei, e2, and 63, the factorization of 



x' and y' satisfies the conditions stated for ( 18 1 



It is clear that if we can not choose distinct qi and q2, then ( 19 1 must be the 



case. □ 
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Our goal here is to find a prime number p with p&L = a\a2(x-iffL such that 
Property |4 . 3 1 below is satisfied: 

Property 4.3 

1 . ( «! a2 , "2 053 ) H 1 (Qg* , £ [2] ) unr is surjective; 

2. {x,y) Hi(Qp,£[2])unr is surjective; 

3. (cci a2, ocico) — ^ H^(Q^,£'[2]) is the trivial map for all other places ^ in S^. 

Using this prime p, we will find a twist such that dimSel^^-* (£■/)) < dimSel^^'*(£'). 

By Lemma [4!2| we have the following possibilites: (a) qi, q2, and q* are all 
distinct; (b) q\ q2 = q*; (c) qi =q2 = q*; (d) qi =^27^^*- Since the proofs of 
(a) and (b), and of (c) and (d) are very similar to each other, we present the proofs 
of (a) and (c) in this paper. 

Suppose that L/Q is not Galois. Let us consider the case that q\ =q2 = q* ■ By 
Lemma 4.2[ we have factorization (19). We claim that there are prime elements 
Ui of iffi for z = 1,2,3 lying over a prime p such that a^a/s represent elements in 
Hi(Q,£[2]),and 

1. 

(aia2/^) = l (20) 
for all places ^ dividing places contained in Se, not equal to q*; 



2. 

(aia2/^i) = -1, (a2«3/^i) = l, 
(aia2/^2) = l, (a2a3 / ^2) = -1- 



(21) 



By Lemma 3.4 



(a2a3 / ^1) = (a2 / ^1) (^2 / ^3) (ai / (a2 / ^2) ; 
(«2«3 / ^2) = (a2 / q32) (a2 / qJi) (ai / ^2) («2 / ^3) • 



Recall from Remark 3.6 the (only) constraint on the values of Legendre symbols 



above, and use the Cebotarev density theorem as in ( [T6| ) to choose a totally positive 
prime element p\ such that (oci / ^1) = -1, (a2 / ^3) = -1, / ^j) = 1 for 
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all other pairs (/, j), and (pi / = 1 for all places ^ dividing places contained 



in Se not equal to q*, so that d20]) and (21 1 are satisfied. Then, by Lemma 3.4 and 



the reciprocity law, Lemma [377| we have 
{x/a,) = ix/p,)=llip,/£l)= n (Pi/^) 

= (pi / Hi) (pi / tHi) (Pi / 02) (Pi / ^02) = (ai / ^i) («! / ^^2) 
= -1; (22) 

(x/a2)=(x/P2)= n(p2/n)= n 
= n (pi/^^^) 

= (Pi / 03) (Pi / T02) (Pi / 0i) (Pi / T03) = (a2 / ^1) (a2 / ^2) 
= 1. (23) 

Similarly, we find 

(3;/ai) = (ai/^2)(ai/^3) = l; (24) 
(y/a2) = (a2/^2)(a2/^3) = -l. 

Let us consider the case that q*, q\, and qj are all distinct. Let q*&L ~ 



*Pj*P|*P3 be the factorization into prime ideals. By Lemma 4.2, we may assume 

x^L = ^Ji^J2($f*f??3')((^I)^'(^2)-'^(^;)-'^)axb?; 

y^L = $?i$2(^r^2'^?) WxTm\'^\Tyy'o'; 

where ^J, = = = = mod 2, 
and <ii<i2 7^ 1 and eie2 7^ 1- 

Let T;-; := (a, / ^;), := (a, / and 7;.* := (^a, / Then, as in (22), 
([23]), and ( |24l ), we have 

{x I a2) = r2ir22(f//f2t7g)((r2*i)^'(7^22)-'^(7S)^^); 

{y I ay) = TnfnijllTllTl^ [{ni)\n2)\n,TY 
{y I a2) = f2,T22{T^lT^lT^l) {{T2\)HTi2)H&) ■ 



(25) 
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Recall that (21) describes the map ( tti a2 , 053 ) — H ^ (Q^* , [2] ) um, and it is clear 
that there are values of T*j such that this map is surjective. Now, with these values, 
let us treat 7j*- as constants in the above system where Tij and fij are variables. If 
all dj and ej are zeros, then the above system has rank 4. If all e,- are zeros, 
but some dj is not, then it is clear that the system has rank 4. Say ei = 0, and 
^2 = ^3 = 1, and treat Tij as constants. Then, the rank of the system is greater than 
or equal to the rank of the vectors 

7^1 17^12, 72l722, T12T13, T22T23 

where T22T23 = TiiTi2Ti3T2\, and the five variables Tjj 7^ T23 are free. The set of 
these four vectors has rank 4. Similarly, when 62 = and ei = ^3 = 1, it turns 
out that the system has rank 4. This proves that we could choose p such that 
{x,y) Hi(Qp,£'[2])unr is surjective. 

The case that L/Q is Galois can be handled in the similar way. In fact, we 



considered the system (25) to compute the image of {x,y) under the restriction 



map at p in F2 x F2 = H^(Qp,£'/)[2])unr- For the Galois case, we have only three 



free variables Tn, T\2, and T\3 (see Lemma 3.5). For the case q\= q2 = q* , as in 



(25 ), the restriction map at p is given by 



( (x / ai) , (x / a2) ) = (riiri2, r2ir22) 
( (y / ai) , (y / a2) ) = (^12^13, T22T23) 

where T2\ = T13, T22 = T\\, and T23 = T\2- By a similar analysis as in the non- 
Galois case, it turns out that for all cases, with these three free variables for each 
prime, the restriction map at p is surjective. 



Suppose we have Property 4.3 Recall that we chose pi using ( 14) in Section 
|3| which determined the a/s above. Note that using a higher power modulus m in 
( [141 ), choose pi which yields the tt/'s with the same property given above. 

Let K' = M{y/q : q < 00^ q E S). Then, using a modulus m of high exponents, we 
may assume that K' is contained in the ray class field of M mod m. Recall that 
we choose pi in Mm/Mm,i such that pi =* 1 mod m' where ra' is the "greatest 
divisor" of m supported only by S as in ( [20] ). As p denotes the rational prime over 
which pi lies, Frob(pi) in Gal(i?m/M) restricts trivially to K'/M, i.e., p splits 
completely in K', which means that (q / p) = 1 for all finite primes q E S. Since 
2 G 5, we have p = I mod 8 and, hence, {p / q) = I for all finite primes q E S. 
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Then, by Lemma |3.1[ there is an inert prime Dq such that for all finite primes 
r e Se, we have [p / r) = (Dq / r), i.e., {pD^ / r) = 1. Now let D = pDq. Then, 
at each r contained in Se, the local coboundary image of Ed is equal to that of E 
at r (see (V, Proposition 2.5]). Let be Te U {p}. Then, dimH^{Q,E[2\)TE + 
2 = dimHi(Q,£'o[2])7^^, and the following diagram illustrates the computation 
of Se|(2)(£^): 



HnQ,£[2])r, 



incl 



Hi 



,Ed[2]) 



(26) 



1 



Se|(2)(£) 



incl 



incl 



Ed 



Se|(2)(£^) 



V 

where the maps and denote the process of applying the local condition 
at V, and n is a positive integer. Note that if v 7^ /> is contained in T^^, then 



Im^f C Im^f° since Im5^^ = ImSy, and that (21 1 makes the dimension drop 



by 2 at q*. Since Im^f C Im^f^, at each step, the dimension drops by more 
or the same dimension for H^{Q,Ed[2])t^^ than for Hi(Q,£'[2])7^. Especially, at 
q*, it necessarily drops by more dimension for H^{Q,Ed[2])te^. Recall (jsj) from 
Section [2} Then, if ho and h denote the sums of dimension-drops over Te for 
H\Q,Eo[2])te^ and H\Q,E[2])te, respectively, then we have 

dim « = dim H 1 (Q, Ed [2] ) - ho 
= dimH\Q,E[2\)T,+2-hD 
< dimH\Q,E[2])TE+2-h = dimSe|(2)(£) + 2. 

Thus, dimW;fo < dimSe|(2)(£) + 1. Since lm5p is totally ramified and {x,y) 
maps onto H^{Qp,ED[2])um, the dimension drops by 2 at p. Therefore, dimSel*-^-' (Ed) 
dimW^^o _2 < dimSe|(2)(£) - 1 and, hence, dimSe\'^^\ED) < dimSe\^^\E). This 
concludes the proof of the existence of such D. 
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When q* is not equal to qi or q2, the order of applying the local condi- 



tions, which was specified earlier (see (17)), matters for our argument. By (20), 



the elements oc/OCj satisfy all the local conditions of Ed and E at all places in 
Se\{i* i^li^li}, and as a result, the dimension drops by 2 at q* as the local con- 



dition at q* precedes the ones at qi or q2 (see ( 17 )). In order to have the desired 



values of {x / a,) and {y / aj) as in (22) and (23 ), we require nontrivial values of 



some («; / ^) for some ^ dividing qi or q2. Thus, if the local condition at qi or 
q2 preceded the one at q*, some atttj might not survive the local condition at qi 
or q2, and the dimension may not drop by 2 at 

Let us add a few words on using unramified primes with rip = 2. The ad- 
vantage of using this prime is that dimH^(Q,£')5^ -f 1 = dimH^{Q, Ei))sd where 
D = p, and that our technique yields a nontrivial map Sel'-^-' (E) H ^ {Qp,E [2] )unr 
especially if dimSel*^^'*(£') = 1. This would result in dimSe\^^\Eo) = 0. First of 
all, if L/Q is Galois, then we do not have such a prime available. Suppose that 
L/Q is not Galois. Our technique is basically to throw all the local conditions 
into a one ray class field R of L, and use the Cebotarev density theorem and the 
law of quadratic reciprocity to choose p and figure out what happens at p. The 
following lemma summarizes the difficulty of choosing such p with rip = 2: Re- 
call that M is the Galois closure of L, and suppose that (t) = Gal(A//L) and 
((7,T)=Gal(M/Q). 

Lemma 4.4 Let R be a finite abelian extension of L, and cc an automorphism in 
Ga\{R/L). Let Q. represent a prime ideal in R, and a prime ideal in L. Then, 
there is Frob(n/q3) in Ga\{R/L) such that Frob(n/<P) = a and f{^/p) = 2 if 
and only if there are a Galois extension F/Q containing RM and an automorphism 
H in Gal(F/Q) such thatre^Mil^) is TO or xo^ and resR{iJ.^) = a. 

It seems to us that reSi;(jU^) = a is a very difficult condition to meet! 

Let us prove the corollary [L2 By Theorem |1.1[ there is a quadratic twist of 



Eoq for which dim Sel'-^''(£'DQ) is or 1 and Dq is odd. Suppose that dim Sel'-^''(£'DQ) 
0. Using Q, the parity conjecture of elliptic curves over Q can be proved under 
the assumption on the finiteness of the Tate-Shafarevich group. Since we con- 
struct a Do as a product of large odd primes, the quadratic twist En^^ has multi- 
plicative reduction at v. Let E' : = Eo(f, and let ^Q{n) be the Dirichlet charac- 
ter associated with the quadratic extension Q{-\/Q). Recall that the root number 
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w{E'j^) is equal to w{E') ■ ^d{—Ne') if the conductors Ne and are coprime 
to each other, where = D if D = 1 mod 4. Recall that if D = 1 mod 4, then 

Note that if — 1, then E' must have good or additive reduction at v. So, 
we consider only the two cases: = 2 or 3. Suppose that riy = 2 or 3 where 



V is unramified in L. Use Lemma 3.1 to choose a prime number r with = 1, 
(r / v) = — 1, and (r / (^r) = 1 for all other primes q of bad reduction of E' . Since 
dimSel^^''(£'') = 0, after we apply the local conditions of all q^^v, the dimension 
of the following subgroup is {riy — 1): 

<^(£',v) := {a G H\Q,E'[2]) : a elm5^., forallw^v} (27) 

where 8w are the local coboundary maps for E' . Let D = r. Then, ^(£'^,v) = 
"^{E' ,v) and, hence, dimSel'^^''(£'^) < {riy — l). Note that since E' has multiplica- 
tive reduction at v, ^d{—Ne') = — 1- It follows that w{E'j^) = — 1, and by [|7l, 
rank(£'^(Q)) is odd which means that it is 1. On the other hand, the finiteness 
of the Tate-Shafarevich group implies the non-degeneracy of the Casslels-Tate 
parmg from which it follows that dimn(£:^)[2] ^ 1. Thus, dimSe|(2)(£^) = 1. 

Suppose that = 2 and v is ramified in L. Consider the field extension 
F = L{^/^, y/q : q \ 65') where S' is the product of all places of bad reduction 
of E'. Let Frob(^/ p) be a Frobenius automorphism of F/Q which trivially re- 
stricts to L{\/^) and L{y/q) for all q v, but nontrivially to L{y/v)/L. So, 
Frob(*p/p) nontrivially restricts to M/L and, hence, np = 2. Moreover, via the 
quadratic reciprocity, this means that {p / v) = —I and (p / q) = I for all q ^ v. 
Let D = p. Then, D = 1 mod 4 and, hence, ^(-A^^O = ^(A^^/) = -1. Since 
dim^(£',v) = l,dim^(£^,p) < 1 + (n^- 1) = 2 and, hence, dimSe|(2)(£^) < 2. 
As in the previous cases, = 1 follows from w{E'j^) = — 1. The result 

of the corollary follows from [1, Theorem 1.2]. 
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